CVE-2026-9078

Katalog CVE

CVSS 5.4 · Medium EPSS 0,26%

Kerentanan User Interface (UI) Misrepresentation of Critical Information pada mozilla firefox. Skor CVSS 3.1 5.4 (Medium) menurut CISA ADP.

Deskripsi (NVD)

Firefox for iOS displayed specially crafted right-to-left (RTL) and internationalized domain names (IDNs) incorrectly in link preview UI surfaces. A crafted RTL hostname could visually reorder portions of the displayed domain, causing attacker-controlled sites to appear as trusted origins. This vulnerability was fixed in Firefox for iOS 151.1.

Rincian

Terbit di NVD

25 Mei 2026

Terakhir diubah

23 Juli 2026

Status NVD

Undergoing Analysis

CVSS 3.1

5.4 (Medium), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-451: User Interface (UI) Misrepresentation of Critical Information

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mozilla.org/security/advisories/mfsa2026-52/ advisory vendor
• https://bugzilla.mozilla.org/show_bug.cgi?id=2029371 permissions required